CVE-2023-44221

Publication date

2023-12-05 20:10:35

Family

sonicwall

State

PUBLISHED

Description

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a nobody user, potentially leading to OS Command Injection Vulnerability.